Classification

Description

Multiple vulnerabilities has been discovered and corrected in
libtiff :

libtiff did not properly convert between signed and unsigned integer
values, leading to a buffer overflow. An attacker could use this flaw
to create a specially-crafted TIFF file that, when opened, would cause
an application linked against libtiff to crash or, possibly, execute
arbitrary code (CVE-2012-2088).

Multiple integer overflow flaws, leading to heap-based buffer
overflows, were found in the tiff2pdf tool. An attacker could use
these flaws to create a specially-crafted TIFF file that would cause
tiff2pdf to crash or, possibly, execute arbitrary code
(CVE-2012-2113).